Vulnerabilities > SUN > Solaris > 9.0

DATE CVE VULNERABILITY TITLE RISK
2003-04-28 CVE-2003-1070 Denial of Service vulnerability in Sun Solaris RPCbind
Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash).
network
low complexity
sun
5.0
2003-04-02 CVE-2003-0161 The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.
network
low complexity
sendmail compaq hp sun
critical
10.0
2003-04-02 CVE-2003-0092 Buffer Overflow vulnerability in SUN Solaris and Sunos
Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.
local
low complexity
sun
7.2
2003-03-28 CVE-2003-1074 Local Privilege Elevation vulnerability in SUN Solaris 9.0
Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges.
local
low complexity
sun
7.2
2003-03-25 CVE-2003-0028 Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
network
low complexity
gnu mit openafs sgi cray freebsd hp ibm openbsd sun
7.5
2003-03-05 CVE-2003-1077 Denial Of Service vulnerability in SUN Solaris 9.0
Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system hang).
local
low complexity
sun
2.1
2003-03-03 CVE-2003-0064 The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g.
network
low complexity
sgi hp ibm sun
7.5
2003-02-19 CVE-2003-0058 Denial of Service vulnerability in Kerberos Key Distribution Center
MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain protocol request that causes a null dereference.
network
low complexity
mit sun
5.0
2003-02-18 CVE-2003-1079 Denial of Service vulnerability in Sun Solaris UDP RPC Packet
Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via certain arguments in RPC calls that cause large amounts of memory to be allocated.
network
low complexity
sun
5.0
2003-02-11 CVE-2003-1080 Local Race Condition vulnerability in Sun Microsystems Solaris Mail Reading
Unknown vulnerability in mail for Solaris 2.6 through 9 allows local users to read the email of other users.
local
high complexity
sun
1.2